h2database (1.4.196-2ubuntu0.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Possible ACE due to deserialization of untrusted data
    - debian/patches/CVE-2021-42392.patch: Updated
      src/main/org/h2/util/JdbcUtils.java and
      src/test/org/h2/test/unit/TestTools.java to limit JNDI URLs to use the
      (local) java protocol only, which denies any remote LDAP/RMI queries.
    - CVE-2021-42392
  * SECURITY UPDATE: Possible ACE due to incorrect handling some URLs
    - debian/patches/CVE-2022-23221.patch: Updated
      src/main/org/h2/tools/Console.java to disable h2 console, as it is a
      developer tool and not required by any reverse-dependency.
    - CVE-2022-23221
  * Fix FTBFS:
    - debian/patches/jts-1.15.patch: Add support for JTS 1.15
    - debian/patches/TestCrashAPI.patch: Fix FTBFS with OpenJDK 11.

 -- Chrisa Oikonomou <chrisa.oikonomou@canonical.com>  Thu, 06 Jun 2024 15:08:21 +0300

h2database (1.4.196-2) unstable; urgency=medium

  * Fixed the build failure when maven-debian-helper is installed
    (Closes: #875366)
  * Standards-Version updated to 4.1.1

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 24 Nov 2017 12:53:48 +0100

h2database (1.4.196-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patches

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 20 Jun 2017 09:49:11 +0200

h2database (1.4.193-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patches

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 11 Nov 2016 22:00:48 +0100

h2database (1.4.192-3) unstable; urgency=medium

  * Transition to the Servlet API 3.1
  * Switch to debhelper level 10

 -- Emmanuel Bourg <ebourg@apache.org>  Wed, 26 Oct 2016 09:18:19 +0200

h2database (1.4.192-2) unstable; urgency=medium

  * Fixed the build failure in offline mode

 -- Emmanuel Bourg <ebourg@apache.org>  Sat, 18 Jun 2016 23:41:19 +0200

h2database (1.4.192-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patches
  * Team upload.
  * Set the locale when generating the javadoc to improve the reproducibility
  * Standards-Version updated to 3.9.8 (no changes)
  * Use a secure Vcs-Git URL

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 03 Jun 2016 13:00:51 +0200

h2database (1.4.191-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patches

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 29 Jan 2016 22:30:08 +0100

h2database (1.4.190-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patches
    - Depend on libservlet3.0-java (Closes: #801039)
  * Watch and download the new releases from GitHub

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 21 Dec 2015 13:52:11 +0100

h2database (1.4.185-2) unstable; urgency=medium

  * Team upload.
  * Drop 04-jts-compatibility.patch. No longer needed with jts 1.13.
  * Switch to libservlet3.1-java. (Closes: #801039)

 -- Markus Koschany <apo@debian.org>  Wed, 11 Nov 2015 18:15:35 +0100

h2database (1.4.185-1) unstable; urgency=low

  * Initial release. (Closes: #607891)

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 17 Feb 2015 08:16:31 +0100
